$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f74fa0c9-0176-30b1-81ff-5ee642002cda.roa File: f74fa0c9-0176-30b1-81ff-5ee642002cda.roa (raw, json) Hash identifier: dlV9q9iRY2HMEqUt6cbMOCXN+l+K/1tiqQj/uHNfawk= Subject key identifier: 1C:AC:FC:3A:4E:3F:B6:0F:EE:02:98:0F:62:F1:CC:E8:16:60:8E:41 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584B0B76C2C3CD331187E8D65A80 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f74fa0c9-0176-30b1-81ff-5ee642002cda.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 396481 IP address blocks: 152.44.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:c2:c3:cd:33:11:87:e8:d6:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=71723b5a-0260-4beb-984e-61ffb63dd20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8a:08:9e:8c:49:c4:1c:92:41:e9:b4:2b:47: 37:e4:0e:ff:62:a8:2e:2f:d2:b4:be:3e:a9:53:1b: f7:70:a5:95:fe:ea:84:a0:f6:3c:cd:b0:20:91:e3: 5c:88:c6:89:44:2b:c9:41:e1:bb:fc:49:8c:cf:30: e3:fb:2c:74:93:35:d0:2c:d2:85:53:5b:79:56:2e: 54:3a:9e:93:a3:5f:42:b6:d5:d7:90:62:e6:89:3c: 87:eb:a0:d3:70:ad:d0:cc:fd:09:44:d4:1a:6a:9c: 2b:e5:93:e1:dd:97:c9:51:8b:00:51:cd:20:aa:4e: d0:65:40:2c:a7:9b:b5:4c:f2:be:33:d8:1b:6e:82: e1:c6:9e:39:30:d1:fb:75:09:d8:07:e6:c3:c8:cc: f0:19:49:ef:9a:a8:28:e6:31:1e:e2:7b:ac:c9:45: e0:f6:f2:ed:ea:f1:7a:9f:b3:bc:cd:56:ed:2e:97: 07:ea:fa:56:2b:94:44:83:2a:4a:90:55:d0:61:55: db:4f:5b:4c:3c:e7:f5:77:c5:75:c9:48:58:1e:51: fe:5d:f8:ba:e8:ab:4d:e9:4f:e9:dc:76:d0:91:69: 44:e0:2c:52:03:9a:7d:4b:c1:76:d9:b9:9a:01:77: 2e:fe:f6:8e:2b:b4:92:35:04:a4:0e:31:f3:80:5e: 7d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:AC:FC:3A:4E:3F:B6:0F:EE:02:98:0F:62:F1:CC:E8:16:60:8E:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f74fa0c9-0176-30b1-81ff-5ee642002cda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 152.44.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:04:f1:f4:e1:5d:93:ec:8d:ac:45:7d:10:bf:00:d4:e4:3d: 01:69:89:f3:9f:cc:f2:ca:80:a4:39:d3:04:68:1a:12:54:a9: 24:d0:b5:5b:25:00:ef:8e:0d:d3:92:89:88:fb:2b:8e:0a:ad: c0:72:e3:5f:7c:f9:3c:0d:6d:fa:53:37:aa:b5:1a:ec:10:d1: 7e:d7:51:a7:d3:27:c4:e0:4b:38:54:4e:57:36:fe:2b:af:c0: ff:9b:d7:46:44:d5:9f:b0:2e:fa:0a:91:45:8d:b1:62:a2:2b: af:3b:ee:24:05:7d:f5:62:27:3f:b1:15:ac:e4:53:39:5d:80: 51:eb:1d:d3:10:c6:b1:fc:7b:b7:60:5a:11:aa:69:dc:2d:ef: 42:89:b7:78:01:8a:b7:56:04:3a:8c:29:33:0a:a5:58:84:80: 46:e2:a4:75:bb:f1:0c:ec:99:48:61:31:0c:fc:e6:cc:8a:2f: 5c:24:8c:fc:de:3e:7b:cf:eb:d7:b9:1b:bd:6f:78:d9:44:19: 5f:1c:67:6d:64:20:ce:9f:7d:eb:86:19:63:27:e8:17:72:45: b2:73:d4:9f:90:75:63:82:6e:b7:3f:76:71:75:fb:7e:16:0a: 32:0e:20:e9:f8:34:1e:26:30:d7:17:f1:4c:78:2b:25:80:f8: 0d:d5:34:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdsLDzTMRh+jWWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NzE3MjNiNWEtMDI2MC00YmViLTk4NGUtNjFmZmI2M2RkMjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYoInoxJxBySQem0K0c35A7/YqguL9K0vj6p Uxv3cKWV/uqEoPY8zbAgkeNciMaJRCvJQeG7/EmMzzDj+yx0kzXQLNKFU1t5Vi5U Op6To19CttXXkGLmiTyH66DTcK3QzP0JRNQaapwr5ZPh3ZfJUYsAUc0gqk7QZUAs p5u1TPK+M9gbboLhxp45MNH7dQnYB+bDyMzwGUnvmqgo5jEe4nusyUXg9vLt6vF6 n7O8zVbtLpcH6vpWK5REgypKkFXQYVXbT1tMPOf1d8V1yUhYHlH+Xfi66KtN6U/p 3HbQkWlE4CxSA5p9S8F22bmaAXcu/vaOK7SSNQSkDjHzgF59MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBys/DpOP7YP7gKYD2LxzOgWYI5BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZjc0ZmEwYzktMDE3Ni0z MGIxLTgxZmYtNWVlNjQyMDAyY2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmCy9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0E8fThXZPsjaxFfRC/ANTkPQFpifOfzPLKgKQ50wRoGhJUqSTQtVsl AO+ODdOSiYj7K44KrcBy4198+TwNbfpTN6q1GuwQ0X7XUafTJ8TgSzhUTlc2/iuv wP+b10ZE1Z+wLvoKkUWNsWKiK6877iQFffViJz+xFazkUzldgFHrHdMQxrH8e7dg WhGqadwt70KJt3gBirdWBDqMKTMKpViEgEbipHW78QzsmUhhMQz85syKL1wkjPze PnvP69e5G71veNlEGV8cZ21kIM6ffeuGGWMn6BdyRbJz1J+QdWOCbrc/dnF1+34W CjIOIOn4NB4mMNcX8Ux4KyWA+A3VNOE= -----END CERTIFICATE-----Generated at Fri Oct 10 21:31:10 2025 by rpki-client